Synchx00
a812249c4c
fix(s3): address review feedback on s3_bucket_object_public
...
Make the check opt-in via three audit_config keys (disabled by default),
lower severity to low, and clarify that this is a spot-check sample.
- prowler/config/config.yaml: add s3_bucket_object_public_enabled
(False), _max_objects (100), _sample_size (3) with guidance pointing
to s3_bucket_acl_prohibited for comprehensive coverage.
- Check early-returns when disabled; otherwise reads max_objects and
sample_size from audit_config. Uses Check_Report_AWS. Compares the
AllUsers group URI exactly instead of substring-matching. PASS
message discloses the sample size and recommends disabling ACLs via
Object Ownership for full assurance.
- metadata.json: Severity -> low; Description, Notes and Recommendation
disclose the sampling limitation and cross-reference
s3_bucket_acl_prohibited; RelatedTo links the two checks.
- Unit tests cover: disabled-by-default (no findings), empty bucket
PASS, private-objects PASS, public-object FAIL, AccessDenied MANUAL,
other ClientError MANUAL.
2026-04-22 15:51:22 +07:00
Synchx00
d033e9a8fd
feat(s3): new check s3_bucket_object_public to detect public objects
2025-12-11 20:10:59 +07:00
Pepe Fagoaga
e2f30e0987
chore(changelog): v5.15.0 ( #9495 )
2025-12-11 09:29:55 +01:00
Rubén De la Torre Vico
c80710adfc
feat(mcp_server): add muting management tools ( #9510 )
2025-12-11 09:19:17 +01:00
Rubén De la Torre Vico
1410fe2ff1
feat(mcp_server): add scan management tools ( #9509 )
2025-12-11 09:16:36 +01:00
Pedro Martín
284910d402
chore(readme): update with latest changes ( #9508 )
2025-12-10 18:48:28 +01:00
Pepe Fagoaga
04f795bd49
revert(docs): remove old image from readme ( #9507 )
2025-12-10 18:42:12 +01:00
Pepe Fagoaga
8b5e00163e
docs: remove old image from readme ( #9506 )
2025-12-10 18:34:36 +01:00
Hugo Pereira Brito
57d7f77c81
docs: enhance README ( #9505 )
2025-12-10 18:28:27 +01:00
Rubén De la Torre Vico
16b1052ff1
feat(mcp_server): add resource management tools ( #9380 )
2025-12-10 17:40:45 +01:00
Rubén De la Torre Vico
978e2c82af
feat(mcp_server): add provider management tools ( #9350 )
2025-12-10 17:31:21 +01:00
Pepe Fagoaga
0c3ba0b737
fix(timeseries): Remove inserted_at and add muted=false ( #9504 )
2025-12-10 16:45:12 +01:00
Adrián Peña
4addfcc848
chore: add migration to perform the backfill ( #9500 )
2025-12-10 16:39:12 +01:00
Alan Buscaglia
8588cc03f4
fix(ui): use Sentry namespace for browserTracingIntegration ( #9503 )
2025-12-10 16:02:04 +01:00
Alan Buscaglia
7507fea24b
fix(ui): update dependencies to address security vulnerabilities ( #9357 )
2025-12-10 12:54:38 +01:00
Alan Buscaglia
18f0fc693e
revert(ci): update UI E2E tests workflow for cloud environments ( #9499 )
2025-12-10 10:53:10 +01:00
Hugo Pereira Brito
606f505ba3
feat(docs): add dependency table to unit-testing page ( #9498 )
2025-12-10 10:51:50 +01:00
lydiavilchez
bfce602859
fix(gcp-cloudstorage): handle VPC-blocked API calls as PASS ( #9478 )
2025-12-10 10:40:52 +01:00
Alan Buscaglia
ba45b86a82
chore(ci): update UI E2E tests workflow for cloud environments ( #9497 )
2025-12-10 10:31:07 +01:00
Pedro Martín
d786bb4440
fix(compliance): make unique requirements IDs for ISO27001 2013 - AWS ( #9488 )
2025-12-10 09:54:05 +01:00
9424289416
feat(compliance): add RBI Framework for Azure ( #8822 )
...
Co-authored-by: pedrooot <pedromarting3@gmail.com >
Co-authored-by: Pepe Fagoaga <pepe@prowler.com >
2025-12-10 09:24:35 +01:00
Pedro Martín
3cbb6175a5
feat(compliance): add SOC2 Azure Processing Integrity requirements ( #9463 )
2025-12-10 08:53:08 +01:00
Pedro Martín
438deef3f8
feat(compliance): add SOC2 GCP Processing Integrity requirements ( #9464 )
2025-12-10 08:45:53 +01:00
Pedro Martín
1cdf4e65b2
feat(compliance): add SOC2 AWS Processing Integrity requirements ( #9462 )
2025-12-10 08:41:56 +01:00
Andoni Alonso
dbdd02ebd1
fix(docs): solve broken link ( #9493 )
2025-12-10 08:09:25 +01:00
Pedro Martín
d264f3daff
fix(deps): install alibabacloud missing dep ( #9487 )
2025-12-09 17:18:32 +01:00
Hugo Pereira Brito
01fe379b55
fix: remove incorrect threat-detection category from checks ( #9489 )
2025-12-09 17:11:09 +01:00
Pedro Martín and Alan Buscaglia
50286846e0
fix(ui): show Top Failed Requirements for compliances without section hierarchy ( #9471 )
...
Co-authored-by: Alan Buscaglia <gentlemanprogramming@gmail.com >
2025-12-09 16:28:47 +01:00
Rubén De la Torre Vico
20ed8b3d2d
fix: MCP findings tools errors ( #9477 )
2025-12-09 15:16:55 +01:00
Alan Buscaglia
45cc6e8b85
fix(ui): improve overview charts UX and consistency ( #9484 )
2025-12-09 13:33:41 +01:00
Hugo Pereira Brito
962c64eae5
chore: execute tests for only needed aws services ( #9468 )
2025-12-09 11:06:07 +01:00
César Arroba
7b56f0640f
chore(github): fix release messages ( #9459 )
2025-12-09 10:06:55 +01:00
Alan Buscaglia
49c75cc418
fix(ui): add default date_from filter for severity over time endpoint ( #9472 )
2025-12-05 17:55:04 +01:00
Alan Buscaglia
56bca7c104
feat(ui): implement Risk Plot component with interactive legend and navigation ( #9469 )
2025-12-05 14:03:58 +01:00
faaa172b86
chore(aws): enhance metadata for macie service ( #9265 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-12-05 12:03:13 +01:00
Alan Buscaglia
219ce0ba89
feat(ui): add navigation progress bar for better UX during page transitions ( #9465 )
2025-12-05 12:01:00 +01:00
Adrián Peña
2170e5fe12
feat(api): add findings severity timeseries endpoint ( #9363 )
2025-12-05 11:19:37 +01:00
e9efb12aa8
chore(aws): enhance metadata for networkfirewall service ( #9382 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-12-05 09:39:01 +01:00
Chandrapal Badshah and Chandrapal Badshah
74d72dd56b
fix: remove importing non-existent classes ( #9467 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
2025-12-05 08:05:34 +01:00
06d1d214fd
chore(aws): enhance metadata for mq service ( #9267 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-12-04 17:56:08 +01:00
Pepe Fagoaga and Copilot Autofix powered by AI
902bc9ad57
fix(api): unlimited limit-request-line ( #9461 )
...
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-12-04 17:45:58 +01:00
3616c0a8c0
chore(aws): enhance metadata for lightsail service ( #9264 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
Co-authored-by: Hugo Pereira Brito <101209179+HugoPBrito@users.noreply.github.com >
2025-12-04 16:05:10 +01:00
Alan Buscaglia
7288585fec
chore(ui): migrate from npm to pnpm ( #9442 )
2025-12-04 15:12:39 +01:00
Rubén De la Torre Vico and HugoPBrito
6400dc1059
chore(aws): enhance metadata for guardduty service ( #9259 )
...
Co-authored-by: HugoPBrito <hugopbrit@gmail.com >
2025-12-04 14:35:41 +01:00
Alan Buscaglia
379c1dc7dd
fix(ui): update severity trends endpoint and reorganize types ( #9460 )
2025-12-04 14:35:21 +01:00
Chandrapal Badshah and Chandrapal Badshah
eb247360c3
fix: return human readable error messages from lighthouse celery tasks ( #9165 )
...
Co-authored-by: Chandrapal Badshah <12944530+Chan9390@users.noreply.github.com >
2025-12-04 14:17:14 +01:00
Alan Buscaglia
7f12832808
feat(ui): add Finding Severity Over Time chart to overview page ( #9405 )
2025-12-04 13:19:15 +01:00
César Arroba
9c387d5742
chore(github): fix release notes ( #9457 )
2025-12-04 12:15:09 +01:00
César Arroba
4a5801c519
chore(github): debug release notes ( #9456 )
2025-12-04 12:07:02 +01:00
César Arroba
85cb39af28
chore(github): fix release notes ( #9455 )
2025-12-04 11:53:11 +01:00
Synchx00